Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
File:                     8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft (raw, json)
Hash identifier:          afWBi7ADDQDSd/bbNyqcK8jnQLhahX9u/lZb7YYmlQ0=
Subject key identifier:   02:96:48:DF:31:E8:5F:B1:83:73:61:E6:79:0D:C3:BA:93:21:2E:37
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Certificate issuer:       /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial:       0198801DA77EEF3F7C65555417DB28669E50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
Manifest number:          1620
Signing time:             Wed 06 Aug 2025 16:01:23 +0000
Manifest this update:     Wed 06 Aug 2025 16:01:23 +0000
Manifest next update:     Thu 07 Aug 2025 16:01:23 +0000
Files and hashes:         1: 8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl (hash: 7UnQkaj6DH0qXtNnpznSZ00eaWkgR1eitDW1/UNzo7g=)
                          2: HCmwt2WAK-H7WYTy1icgaTefv78.roa (hash: +bS4/m9dhw+Ug0oj+WLZYyQxSyPJBlp+QZfTQscGHe8=)
                          3: Haz2dutrUVMMKz8DWDpTMKU7v-M.roa (hash: UYJn16zkfgLSDIIDhGPHhj8L2SfoMr/Jiya6AdzxVHU=)
                          4: lTV0wmQBB48Ktr0Vf2ykH7NjIHY.roa (hash: bq6a+K+pPXFxcaKzeiruinFGWe/rm0xE/5P0J11lvFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 14:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:1d:a7:7e:ef:3f:7c:65:55:54:17:db:28:66:9e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
        Validity
            Not Before: Aug  6 16:01:23 2025 GMT
            Not After : Aug  7 16:01:23 2025 GMT
        Subject: CN=029648df31e85fb1837361e6790dc3ba93212e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:75:42:40:71:01:cc:f5:a9:a9:24:16:a6:
                    ba:68:48:8d:b5:28:10:6b:74:23:c6:8d:1e:9f:e5:
                    96:44:f7:1f:76:4f:6b:f6:3b:33:49:b4:d0:30:96:
                    32:a4:b5:c9:6c:ae:5e:de:dc:d8:35:55:05:91:71:
                    30:2d:9a:2d:16:bc:b1:ca:0a:be:cf:e9:59:d7:85:
                    66:90:7a:d3:c6:d0:95:bf:a2:c6:6b:54:1e:3c:27:
                    36:c7:be:1a:20:ef:b9:79:1e:87:7c:4f:20:83:13:
                    dd:cd:f0:8a:9d:48:0d:dc:12:77:bc:9b:cd:b0:7a:
                    64:9b:e2:11:78:76:4f:76:cc:f8:6f:5c:44:a7:6d:
                    d2:54:e2:36:3f:a5:bf:55:09:24:ab:f5:da:ea:e3:
                    2c:53:b6:17:10:09:2c:61:7e:7d:65:e9:43:be:20:
                    d3:c4:8b:31:59:7a:50:76:4d:ba:93:9f:75:7c:25:
                    cd:d6:cd:b0:2b:55:cd:88:d7:b0:39:16:6a:43:88:
                    37:18:fe:50:ce:76:6c:cf:41:06:a8:bd:b6:d1:1b:
                    73:2f:aa:dc:a5:1f:63:48:ae:7d:38:a5:9f:47:4f:
                    21:f7:19:05:48:ac:9f:b9:4e:84:98:d8:a5:1f:89:
                    9a:97:d4:4e:93:83:30:47:13:22:52:9b:48:b8:e3:
                    a1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:96:48:DF:31:E8:5F:B1:83:73:61:E6:79:0D:C3:BA:93:21:2E:37
            X509v3 Authority Key Identifier:
                keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:35:6f:b5:84:02:1e:44:fe:19:83:c9:9c:39:19:4e:64:07:
         e8:b2:ee:ac:9a:83:35:8c:3e:e1:3d:e2:dc:b8:ac:c4:55:93:
         c7:f2:7f:ff:f6:1d:2d:1a:bc:57:64:89:64:6d:f6:d7:24:e2:
         b1:0c:1d:30:b7:4a:59:92:5c:6c:0c:fd:5d:2e:05:e3:cd:07:
         cd:71:9a:7b:96:92:8b:6f:22:e6:56:47:1d:88:a2:94:6e:af:
         ba:83:c5:29:d6:4a:04:da:3a:a1:f3:66:ca:dc:c0:dc:f0:56:
         eb:8f:31:51:4c:f6:1c:b7:12:cd:01:48:82:86:05:ef:89:33:
         0a:ef:62:90:1c:03:aa:33:5e:b5:9c:ab:76:c0:d3:0f:0d:bd:
         b8:ac:10:ce:c3:cc:ae:3b:e1:4b:f9:c9:5e:5d:b6:1f:94:b3:
         a1:c5:09:c8:e4:ac:09:f7:af:a0:7a:e7:40:2f:da:72:0e:35:
         7f:76:a1:0f:27:87:41:9c:d3:34:b2:a2:3f:50:e9:61:b0:63:
         bd:38:4b:d9:51:44:a1:4c:6d:f1:72:b8:b9:16:80:76:33:e5:
         b1:3a:bb:b3:91:7b:8c:c3:17:bb:5d:68:37:e0:33:0f:45:05:
         a6:10:56:41:e8:9d:9e:33:ba:1d:b3:4d:0d:91:5a:82:f5:2a:
         92:07:da:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:49:00 2025 by rpki-client